Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: NBvxNla6TVd0nD+448umBRbQfjX6VpmTkTJcchNU7JI=
Subject key identifier: A5:33:08:6A:89:CF:EE:EB:7B:CC:DC:B1:5B:0B:37:C8:32:9E:C9:8B
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019D2960EA71FF3272779C910E1CAD8ADC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1719
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=)
5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: QH0cn6FCU2bJtoIdiIRplflkKOJqSxfQ/Io+3ghhuB4=)
8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ea:71:ff:32:72:77:9c:91:0e:1c:ad:8a:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=a533086a89cfeeeb7bccdcb15b0b37c8329ec98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:1c:5f:2d:df:98:7c:43:10:2e:8e:22:e0:
da:4e:47:24:93:1a:3d:77:c0:31:ee:00:72:fc:8b:
43:cd:15:28:c0:87:71:64:6c:d6:53:6c:60:a6:8f:
e6:6b:c4:73:64:06:ed:5a:fa:47:5e:3f:d1:ae:ea:
6e:05:19:fe:a1:01:e2:bf:08:96:1b:a5:34:0e:97:
04:c9:8d:c8:54:d1:4e:80:3b:c9:e8:7e:7c:88:72:
b2:1a:95:ec:0c:27:70:1c:ef:72:f3:c8:e9:62:2e:
ea:65:4f:7c:90:5b:35:8a:ee:dd:16:18:be:a9:f7:
a7:27:f2:a1:c5:9e:54:94:83:a6:45:58:b8:f9:12:
8f:9f:c9:5e:d2:05:b8:d5:19:cf:86:fc:e9:d7:e3:
3d:e9:ff:dd:1a:46:34:c5:5d:a6:5a:d3:b6:e5:34:
f0:55:4f:8d:78:83:85:7e:a6:4b:8d:88:45:8f:37:
0c:29:70:1e:a8:f2:39:d3:b8:df:93:f8:15:4d:99:
63:64:f0:40:ff:76:36:f0:aa:a0:6c:84:4e:68:dc:
af:10:ed:66:5f:ca:61:4f:83:16:d7:91:d1:66:16:
4e:a5:ba:81:ea:b1:61:39:57:bf:78:74:66:22:e6:
ab:e1:8a:88:9f:1e:e3:a8:a7:22:0e:5a:ca:cd:15:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:08:6A:89:CF:EE:EB:7B:CC:DC:B1:5B:0B:37:C8:32:9E:C9:8B
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:86:0b:7a:1d:26:e7:26:e6:12:0a:85:09:9a:24:d9:dc:
f3:46:1e:00:ec:00:de:fb:20:bd:62:2a:d6:e8:31:ba:f7:bd:
95:c0:41:be:69:f3:e9:3f:5e:e6:4b:71:ac:32:8a:39:c9:34:
18:4c:34:8a:ba:8b:2a:30:01:e0:81:89:6e:57:d1:6c:04:e0:
13:78:8d:4a:53:b4:f5:76:1c:f8:83:0d:8b:9c:37:23:8d:f7:
ab:fd:61:9f:0a:e8:9a:0c:5a:61:62:d5:e5:05:c2:f9:95:29:
30:8f:cf:de:a6:3a:ed:9d:5c:9e:22:f0:6f:d2:ce:ce:ea:55:
38:90:3c:0d:98:f0:ed:ce:3b:71:dd:bf:07:1a:43:fa:81:ed:
a4:e7:bc:b8:64:d0:ef:ea:34:6b:6c:04:ff:ff:80:be:c0:a9:
f7:4d:25:e2:49:dd:d7:96:7b:1d:cb:33:ac:7f:46:64:b4:98:
05:af:45:d4:80:10:7b:a2:38:38:f3:c4:2c:53:30:d3:0c:28:
d8:60:0d:2c:73:cb:1f:fe:f3:ac:f3:14:c1:b0:00:78:83:ee:
f0:36:b3:0e:57:44:e6:6f:84:9f:d5:47:ea:6d:1a:f7:f6:03:
0a:ce:bd:c8:ec:79:d5:7f:ac:c0:a2:63:a9:dd:7b:98:0d:a5:
03:8c:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:54 2026 by rpki-client